Method: legacyCases.addEvidence

HTTP request
Path parameters
Request body
- JSON representation
Response body
- JSON representation
Authorization scopes
IAM Permissions
CaseCommentV2
- JSON representation
EvidenceType

Full name: projects.locations.instances.legacyCases.addEvidence

Adds evidence, such as a file attachment, to a specific case. The evidence is recorded on the case wall with an optional description and can be marked as important.

HTTP request

Choose a location:

POST https://chronicle.africa-south1.rep.googleapis.com/v1alpha/{name}/legacyCases:addEvidence

Path parameters

Parameters

Parameters
`name`	`string` Required. The evidence (attachment) of a given case. Format: projects/{project}/locations/{location}/instances/{instance}/legacyCases:addEvidence

name

string

Required. The evidence (attachment) of a given case. Format: projects/{project}/locations/{location}/instances/{instance}/legacyCases:addEvidence

Request body

The request body contains data with the following structure:

JSON representation
{ "caseId": string, "alertIdentifier": string, "base64Blob": string, "type": string, "description": string, "isImportant": boolean }

Fields
`caseId`	`string (int64 format)` Required. CaseId is the ID of the case associated for the action.
`alertIdentifier`	`string`
`base64Blob`	`string`
`type`	`string`
`description`	`string`
`isImportant`	`boolean`

Response body

Response message for legacyCases.addEvidence

If successful, the response body contains data with the following structure:

JSON representation

JSON representation
{ "name": string, "caseId": string, "creator": string, "type": string, "isImportant": boolean, "comment": string, "commentId": string, "description": string, "evidenceThumbnail": string, "sizeInKb": integer, "isFavorite": boolean, "caseCommentV2": { object (`CaseCommentV2`) }, "evidenceType": enum (`EvidenceType`) }

{
  "name": string,
  "caseId": string,
  "creator": string,
  "type": string,
  "isImportant": boolean,
  "comment": string,
  "commentId": string,
  "description": string,
  "evidenceThumbnail": string,
  "sizeInKb": integer,
  "isFavorite": boolean,
  "caseCommentV2": {
    object (CaseCommentV2)
  },
  "evidenceType": enum (EvidenceType)
}

Fields
`name`	`string`
`caseId`	`string (int64 format)` Output only. CaseId is the ID of the case associated for the action.
`creator`	`string`
`type`	`string`
`isImportant`	`boolean`
`comment`	`string`
`commentId`	`string (int64 format)`
`description`	`string`
`evidenceThumbnail`	`string`
`sizeInKb`	`integer`
`isFavorite`	`boolean`
`caseCommentV2`	`object (CaseCommentV2)`
`evidenceType`	`enum (EvidenceType)`

Authorization scopes

Requires one of the following OAuth scopes:

https://www.googleapis.com/auth/cloud-platform
https://www.googleapis.com/auth/chronicle
https://www.googleapis.com/auth/chronicle.readonly

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the name resource:

chronicle.cases.update

For more information, see the IAM documentation.

CaseCommentV2

JSON representation
{ "title": string, "comment": string, "isFromWorkflowActivity": boolean, "lastEditor": string, "isDeleted": boolean, "commentForClient": string, "modificationTimeUnixTimInMsForClient": string, "isFavorite": boolean }